ed25519-java

ed25519-java copied to clipboard

CVE-2020-36843

2

Our security scans are detecting https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36843 in the latest available version of eddsa. Any chance of getting this fixed?

robertpatrick

New Version Release?

2

There is no new version release for this project since 2018, are there any plans for upgrading this, or has this been migrated to some other project

ShivaTiwari-G

Fix CVE-2020-36843 by rejecting malleable signatures wih s>=L.

7

This PR fixes CVE-2020-36843 and https://github.com/str4d/ed25519-java/issues/95 I did my best to make the project compile and test under openjdk-17 with minimal modifications. I had to drop support for java-1.7 but...

wglas85